it looks like it happens when the user is logged in. This is the error that I keep seeing on the ADALOperationProvider.log
Failed to get AAD token for logged on user, Error 0x80004005
Getting AAD (user) token with: ClientId = xxxxxxx, ResourceUrl = https://ConfigMgrService, AccountId = https://login.microsoftonline.com/common/oauth2/token, AllowInteractive = 0
WAM token request failed. Status 3, Details 'AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access 'xxxxxxx'.
Trace ID: ca2a28a9-79e7-4f45-94e9-8bf4c6844700
Correlation ID: d408658c-1dd7-4b03-9987-e44b20595f99
Failed to get AAD token..
Unknown error (Error: CAA2000C; Source: Unknown)
Failed to get AAD token for 'xxxxx' from WAM API. Error 0xcaa2000c